Governed by design. Audited by default.

Security overview

Slotwise Company Pvt. Ltd. is ISO 27001 certified. Information security is managed as a system with an owner, a risk register, internal audits and management review — not as a page of promises.

• Tenant isolation enforced at the command boundary; every command is tenant-scoped before any policy or ledger write.
• Least privilege — capability-level roles with segregation-of-duties checks; access-review campaigns; just-in-time support sessions with independent approval and full session audit.
• Encryption in transit and at rest; secrets managed centrally; keys rotated.
• Change control — every deployment and every policy activation is a receipted, reversible command.
• Vulnerability disclosure — report to hello@slotwise.co.in with the subject "Security disclosure"; we acknowledge within two business days.

Data residency

Operational data resides in Indian regions by default. Backups remain in-region. We do not move operational data across borders for processing, support or analytics without written agreement.

Responsible AI charter

1. Named principals. Every agent has an identity, an owner and a scope; its actions are attributable in the audit trail exactly like a person's.
2. Earned autonomy. Agents start at suggest, move to approval-gated action by passing evaluation, and reach autonomy only within value ceilings, scopes and hours you set.
3. Step-back. If measured performance drops below threshold, autonomy reverts automatically.
4. Kill switch. Per agent and platform-wide, exercisable by your administrators.
5. No hidden decisions. Every agent decision cites the policy version and inputs it used.

Audit and controls

An append-only ledger; a receipt for every command; immutable audit workpapers; access-review campaigns with evidence; scan-triggered video at pack and returns retrievable by order. Auditors get read-only access by construction.